token permit signature verification